$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ca091a-076d-337b-abae-a8ab31a8765c.roa File: 32ca091a-076d-337b-abae-a8ab31a8765c.roa (raw, json) Hash identifier: slIDaxQ2vBiZEV5/1rjFSs2D0koLMt1cqDgVpj32L1o= Subject key identifier: 46:EE:72:A3:54:79:5C:48:7B:7C:74:F7:AC:B4:CB:16:03:22:DB:5A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FBDE449FB2853091DF160 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ca091a-076d-337b-abae-a8ab31a8765c.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 96.243.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:bd:e4:49:fb:28:53:09:1d:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=f696d866-9143-49dc-91d6-763167938c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:9c:c0:b8:e8:c3:c5:7c:e7:e6:31:08:4a: 22:c1:07:ad:75:5b:53:d7:b4:9a:a1:30:f9:af:a4: 9f:cb:c9:01:ee:fd:66:ac:eb:18:37:38:bd:97:9b: f8:45:c7:f0:06:a6:43:b6:39:19:d0:2c:71:27:76: 92:e2:5f:ad:98:10:d6:01:e6:13:a6:17:ac:b7:db: 16:c5:7b:ce:f6:cc:e9:44:3c:03:07:2d:1d:ad:e2: c6:11:23:0e:79:a0:82:62:39:69:0e:89:71:32:42: 86:91:97:59:9c:40:b8:a5:7e:61:f9:e0:11:2b:1e: 90:d4:47:7b:24:f8:66:af:33:0e:48:8e:77:34:b1: a4:3b:ec:df:78:0f:f5:3b:dd:26:6c:cd:fb:8c:a7: a5:d0:cf:b8:7d:41:65:0d:87:a1:86:7c:7f:0c:0e: 8a:5f:da:16:47:8d:13:31:28:d8:d8:7e:01:e6:c9: 38:f1:55:49:37:ec:7b:8a:3b:8f:69:57:d8:b0:aa: 29:48:3e:bd:89:1f:24:e8:5f:03:41:2d:be:e3:ef: 22:ab:e5:39:a3:be:dc:82:48:14:35:70:1d:bd:ca: 31:52:aa:87:8f:c7:57:60:54:e3:ac:70:93:a2:fc: e0:80:76:45:d8:f0:66:68:d4:19:ab:f1:a1:43:d2: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EE:72:A3:54:79:5C:48:7B:7C:74:F7:AC:B4:CB:16:03:22:DB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ca091a-076d-337b-abae-a8ab31a8765c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.243.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:60:6d:fa:70:11:8a:8f:31:9b:e6:06:4e:d9:90:9f:d2:c7: bc:6b:81:fb:ae:55:19:2f:e9:77:fe:e7:e9:5f:5f:f6:8a:87: 2d:d7:ab:db:1d:15:6e:97:45:7e:39:13:64:56:67:2c:31:67: 96:99:08:1d:80:96:8d:d8:44:6c:4f:5b:83:e4:dc:5c:9f:fd: 55:ed:17:4b:cf:98:04:e4:06:62:6e:ca:0b:0c:a3:c0:0f:b1: b8:e7:16:cd:98:2f:30:e0:ce:e5:92:cc:cd:98:48:d9:ba:c9: bf:8d:88:11:34:7e:63:28:b7:21:fe:1e:4a:33:03:61:cf:ee: 34:34:58:44:f2:54:71:b9:3e:1f:91:5a:69:47:72:ad:9c:b7: d4:62:45:99:91:7c:52:a4:04:f1:2e:82:b1:0f:10:18:41:60: e3:62:62:46:05:12:49:bb:1b:86:8e:e8:c1:76:d0:5d:6e:2e: 44:d2:05:20:83:18:d3:e3:5d:8a:fa:60:0c:6a:2f:de:ae:d8: 85:15:ad:f0:2e:bd:5e:c0:da:dc:03:1d:03:d8:b5:b5:76:13: 40:54:b4:38:b1:35:96:25:c1:4c:7e:92:b5:13:0c:64:1b:1f: 3c:34:53:55:33:4e:1f:5a:41:26:92:59:e2:b5:11:21:d0:6a: 92:d2:b1:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD73kSfsoUwkd8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZjY5NmQ4NjYtOTE0My00OWRjLTkxZDYtNzYzMTY3OTM4YzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLucwLjow8V85+YxCEoiwQetdVtT17SaoTD5 r6Sfy8kB7v1mrOsYNzi9l5v4RcfwBqZDtjkZ0CxxJ3aS4l+tmBDWAeYTphest9sW xXvO9szpRDwDBy0dreLGESMOeaCCYjlpDolxMkKGkZdZnEC4pX5h+eARKx6Q1Ed7 JPhmrzMOSI53NLGkO+zfeA/1O90mbM37jKel0M+4fUFlDYehhnx/DA6KX9oWR40T MSjY2H4B5sk48VVJN+x7ijuPaVfYsKopSD69iR8k6F8DQS2+4+8iq+U5o77cgkgU NXAdvcoxUqqHj8dXYFTjrHCTovzggHZF2PBmaNQZq/GhQ9I+fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbucqNUeVxIe3x096y0yxYDIttaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzJjYTA5MWEtMDc2ZC0z MzdiLWFiYWUtYThhYjMxYTg3NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYPMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxgbfpwEYqPMZvmBk7ZkJ/Sx7xrgfuuVRkv6Xf+5+lfX/aKhy3Xq9sd FW6XRX45E2RWZywxZ5aZCB2Alo3YRGxPW4Pk3Fyf/VXtF0vPmATkBmJuygsMo8AP sbjnFs2YLzDgzuWSzM2YSNm6yb+NiBE0fmMotyH+HkozA2HP7jQ0WETyVHG5Ph+R WmlHcq2ct9RiRZmRfFKkBPEugrEPEBhBYONiYkYFEkm7G4aO6MF20F1uLkTSBSCD GNPjXYr6YAxqL96u2IUVrfAuvV7A2twDHQPYtbV2E0BUtDixNZYlwUx+krUTDGQb Hzw0U1UzTh9aQSaSWeK1ESHQapLSsSQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:33 2026 by rpki-client